--- loncom/auth/migrateuser.pm	2021/11/18 20:25:27	1.56
+++ loncom/auth/migrateuser.pm	2022/05/21 06:28:35	1.60
@@ -1,7 +1,7 @@
 # The LearningOnline Network
 # Starts a user off based of an existing token.
 #
-# $Id: migrateuser.pm,v 1.56 2021/11/18 20:25:27 raeburn Exp $
+# $Id: migrateuser.pm,v 1.60 2022/05/21 06:28:35 raeburn Exp $
 #
 # Copyright Michigan State University Board of Trustees
 #
@@ -722,23 +722,28 @@ sub handler {
 						     $handle);
             my $checklaunch;
             if ($data{'origurl'} =~ m{^/tiny/$match_domain/\w+$}) {
-                if ($env{'request.linkprot'} ne '') {
-                     unless ($env{'request.linkprot'} eq $data{'linkprot'}) {
-                         $checklaunch = 1;
-                     }
-                }
-                if ($env{'request.linkkey'} ne '') {
-                    unless ($env{'request.linkkey'} eq $data{'linkkey'}) {
-                        $checklaunch = 1;
-                    }
+                unless ($env{'request.linkprot'} eq $data{'linkprot'}) {
+                    $checklaunch = 1;
                 }
-                if ($env{'request.deeplink.login'}) {
-                    unless ($env{'request.deeplink.login'} eq $data{'deeplink.login'}) {
-                        $checklaunch = 1;
-                    }
+                unless ($env{'request.linkkey'} eq $data{'linkkey'}) {
+                    $checklaunch = 1;
+                }
+                unless ($env{'request.deeplink.login'} eq $data{'deeplink.login'}) {
+                    $checklaunch = 1;
                 }
             }
             if ($data{'linkprot'} ne '') {
+                if (($env{'user.name'} ne $data{'username'}) ||
+                    ($env{'user.domain'} ne $data{'domain'})) {
+                    my %linkprot_env;
+                    foreach my $item ('linkprot','deeplink.login') {
+                        if ($data{$item}) {
+                            $linkprot_env{'request.'.$item} = $data{$item};
+                        }
+                    }
+                    &logout($r,$ip,$handle,\%data,\%linkprot_env);
+                    return OK;
+                }
                 &Apache::lonnet::appenv({'request.linkprot' => $data{'linkprot'}});
                 if ($env{'request.linkkey'}) {
                     &Apache::lonnet::delenv('request.linkkey');
@@ -994,29 +999,42 @@ sub handler {
     } elsif ($data{'origurl'} =~ m{^/tiny/$match_domain/\w+$}) {
         $next_url=$data{'origurl'};
     } else {
-        $next_url='/adm/roles?selectrole=1&'.&escape($data{'role'}).'=1';
-        if ($data{'origurl'} ne '') {
-            $next_url .= '&orgurl='.&escape($data{'origurl'});
+        if ($data{'lti.login'}) {
+            $next_url='/adm/roles?selectrole=1&'.&escape($data{'role'}).'=1';
+            if ($data{'origurl'} ne '') {
+                $next_url .= '&orgurl='.&escape($data{'origurl'});
+            }
+        } else {
+            $next_url='/adm/roles?selectrole=1&'.&escape($data{'role'}).'=1';
+            if ($data{'origurl'} ne '') {
+                $next_url .= '&orgurl='.&escape($data{'origurl'});
+            }
         }
     }
     if ($data{'lti.login'}) {
         if (($data{'origurl'} =~ m{/default_\d+\.sequence$}) ||
             ($data{'origurl'} =~ m{^/res/.+\.sequence$})) {
-            $next_url .= '&navmap=1';
+            if ($reuse_session) {
+                $next_url .= '&navmap=1';
+            } else {
+                $next_url .= '&navmap=1';
+            }
         }
     }
     if ($reuse_session) {
         $r->internal_redirect($next_url);
-    } elsif ($data{'deeplink.login'}) {
-        if (ref($extra_env) eq 'HASH') {
-            $extra_env->{'request.deeplink.login'} = $data{'deeplink.login'};
-        } else {
-            $extra_env = {'request.deeplink.login' => $data{'deeplink.login'}};
-        }
-        if ($data{'linkprot'}) {
-            $extra_env->{'request.linkprot'} = $data{'linkprot'};
-        } elsif ($data{'linkkey'} ne '') {
-            $extra_env->{'request.linkkey'} = $data{'linkkey'};
+    } else {
+        if ($data{'deeplink.login'}) {
+            if (ref($extra_env) eq 'HASH') {
+                $extra_env->{'request.deeplink.login'} = $data{'deeplink.login'};
+            } else {
+                $extra_env = {'request.deeplink.login' => $data{'deeplink.login'}};
+            }
+            if ($data{'linkprot'}) {
+                $extra_env->{'request.linkprot'} = $data{'linkprot'};
+            } elsif ($data{'linkkey'} ne '') {
+                $extra_env->{'request.linkkey'} = $data{'linkkey'};
+            }
         }
         &Apache::lonauth::success($r,$data{'username'},$data{'domain'},$home,
                                   $next_url,$extra_env,\%form,'',$cid);